Multi-Tenancy Core
Isolate config, branding, user stores, and policies per tenant — one build, many customers.
Architecture
Own Your Identity Platform
Ship enterprise-ready, multi-tenant single sign-on without rebuilding or redeploying. ProAuth lets you add tenants, customize login journeys, and federate new identity providers at runtime.
Deploy anywhere OpenID Connect Runtime config Zero downtime
Scenarios
Built for real‑world scenarios
Explore deployment patterns for SaaS platforms, on‑prem appliances, and large‑scale enterprise user bases.
SaaSOIDCMFA
SaaS software
Per‑tenant user stores or federation with SCIM synchronization. Runtime policies and branded login.
Learn more
On‑premOfflineOIDC
On‑premises appliances
Bundle identity into your solution and run anywhere, including offline.
Learn more
K8sSCIMHA
Large‑scale user bases
Scale horizontally on Kubernetes with predictable licensing.
Learn more
Features
Why Technical Teams Choose ProAuth
Build a future-proof identity foundation that scales with your SaaS platform and enterprise customers.
Runtime Federation
Connect customer IdPs or your own stores live — no redeploys.
Integration
Advanced OIDC Security
Enable FAPI 2.0, DPoP, mTLS token binding, PAR, JAR, JWT introspection, and privacy-focused subject identifiers.
Security
SCIM Provisioning
Standards-based endpoints for user and group provisioning.
Integration
Claim Rules Engine
Shape tokens per app with declarative claim rules.
Protocols
Admin UI & API
Manage everything through a secure UI or API; automate as code.
Management
Security
Go beyond OAuth basics without rebuilding your identity stack
ProAuth brings high-assurance OIDC and OAuth capabilities into one self-hosted platform: stronger browser boundaries, sender-constrained tokens, hardened authorization requests, and policy profiles for regulated APIs.
Secure baseline included
- Authorization Code with PKCE
- Exact redirect URI matching
- Issuer validation
- Refresh-token replay protection
- No password grant
- Legacy implicit support discouraged
Profile
FAPI 2.0 Security Profile
Opt-in policy enforcement for high-value clients and tenants: PAR, S256 PKCE, confidential clients, strong client authentication, and sender-constrained tokens.
Sender constraint
DPoP and mTLS token binding
Reduce bearer-token replay risk by binding access tokens to a client key or certificate. A copied token alone is no longer enough.
Request security
PAR and JAR authorization hardening
Move rich authorization requests out of the browser URL and optionally sign request objects for integrity across organizational boundaries.
Resource APIs
JWT introspection and token protection
Support high-assurance resource servers with signed introspection responses, reference tokens, encrypted tokens, and revocation-friendly validation.
Privacy
Pairwise subjects and claims requests
Reduce cross-client correlation and release only the identity claims each relying party actually needs.
Workloads
Token exchange for API chains
Exchange broad or external tokens for narrow downstream tokens with the right audience, scope, and service context.
Use the baseline everywhere. Turn on the advanced controls where customer risk, regulation, or partner integrations justify the stronger profile.
Value
Why Organizations Choose ProAuth
Enterprise-grade identity without lock-in — predictable costs, full control, and compliance peace of mind.
Predictable Total Cost
Flat, user‑independent pricing. No per‑user or per‑client fees. Budget with confidence as you scale.
Data Sovereignty & Control
Run anywhere — cloud, on‑premises, or offline. Meet residency and compliance requirements easily.
Security & Compliance Assured
Modern OIDC and OAuth security with FAPI 2.0, sender-constrained tokens, hardened requests, replay protection, and privacy controls.
Flexible Procurement
Subscription (OPEX) or perpetual (CAPEX). Both with optional maintenance & enterprise support.
Transparent Support Model
Basic support included. Escalation Packs and SLA tiers add predictable, capped assistance.
Independent & Future‑Proof
Open standards. No vendor lock‑in. No hidden consumption fees.
Trusted by teams who need enterprise-grade identity control without external dependencies.
ProAuth Licenses
We currently offer three different levels of licenses. Please contact our sales team if you have special requirements or needs.
Starter Edition
Launch confidently with core multi-tenant identity.
Tier 1Tier 3
CHF 1’500.– per year
- Client Apps: 5
- User Stores: 1
- IDP Instances: 1
Included support:
Add-ons: packs
Business Edition
Scale customers & integrations with higher limits.
Tier 1Tier 4
CHF 5’000.– per year
- Client Apps: 15
- User Stores: 2
- IDP Instances: 2
Included support:
Add-ons: packs
Most Popular
Enterprise Edition
Unlimited scale, advanced compliance & deployment options.
unlimited
CHF 15’900.– per year
- Client Apps: unlimited
- User Stores: unlimited
- IDP Instances: unlimited
Included support:
Add-ons: , , , packs
Custom Licensing
Redistributable licenses and special enterprise requirements.
Contact us for pricing
- Client Apps: unlimited
- User Stores: unlimited
- IDP Instances: unlimited
Included support:
Add-ons: custom
Support plan comparison
| Plan | Response Time | Availability | Escalations / Year | Annual Price | Add-on Options |
|---|---|---|---|---|---|
| Basic | 1 business day | Business hours (CET) | 0 | Included | Escalation Packs available |
| Enterprise Standard | 8 business hours | Business hours (CET) | 4 | CHF 6’000.– | Escalation Packs available |
| Enterprise Premium | 4 business hours | Business hours (CET, priority queue) | 8 | CHF 10’000.– | Escalation Packs available |
| Enterprise Managed | 2 hours (Sev-1) | 24×7 (critical issues) | Custom | Contact Sales | Custom |
All prices exclude VAT. Subject to change.
Case Studies
How teams use ProAuth
Selected real deployments showing multi‑tenant SaaS, hybrid manufacturing access, and regulated B2C identity.
Contact
Talk to Our Team
Tell us about your identity challenges. We’ll respond within one business day.